CardPorter Privacy Policy
Last updated: September 3, 2026
Privacy Principles of CardPorter
CardPorter is designed from the ground up to respect your privacy completely:
- Zero Data Collection: We do not collect, store, or transmit any personal information, usage metrics, or file contents.
- 100% On-Device Processing: Card detection, copying, hashing, and verification are performed entirely on your local Mac.
- Zero Network Communication: CardPorter has no network entitlements and makes zero internet requests.
- Strict Read-Only Card Access: Your memory cards are never written to, renamed, or deleted from.
- No Accounts or Tracking: No registration, no ads, no subscriptions, and no analytics SDKs.
1. Information We Do Not Collect
CardPorter does not collect any data from your device. Specifically:
- Photos & Videos: Your media files, EXIF tags, directory names, and file paths never leave your local storage.
- Personal Identifiers: The app does not ask for or collect names, email addresses, device IDs, or IP addresses.
- Usage Analytics: There are no third-party tracking, advertising, or telemetry frameworks embedded in CardPorter.
2. Local Storage & macOS App Sandbox
CardPorter operates strictly inside Apple's App Sandbox environment on macOS. Its security entitlements are strictly limited to three:
com.apple.security.app-sandbox: Confines the app to its designated sandbox container.com.apple.security.files.user-selected.read-write: Grants access exclusively to the memory card and destination folders you choose via the file picker (writing only ever happens to destination folders you selected; access to the card itself is additionally restricted to read-only at the bookmark level — see below).com.apple.security.files.bookmarks.app-scope: Saves security-scoped bookmarks locally so you can access the same card and folders automatically on future launches, without repeating the permission prompt.
Bookmarks created for a memory card are additionally created with the securityScopeAllowOnlyReadAccess option, so the app cannot write to a card even if it tried.
Import history, known-card records, and profile settings are stored locally, entirely inside CardPorter's own sandbox container
(~/Library/Containers/com.furutahss.cardporter/), and are never transmitted anywhere.
3. Required Reason API Disclosures
In accordance with Apple App Store policies, CardPorter declares the following API usage in its PrivacyInfo.xcprivacy manifest:
File Timestamp (0A2A.1)
Used to read the creation and modification timestamps of files you have selected (via the card or a destination folder), so CardPorter can sort media into date-based folders and detect which files have already been imported.
Disk Space (E174.1)
Used only to check whether a destination has enough free space before copying begins. This value is never stored, transmitted, or compared over time.
4. Zero Network Requests
CardPorter has no outgoing or incoming network access capabilities. It functions entirely without an active internet connection, and cannot upload your photos or videos anywhere even if you wanted it to.
5. Inquiries and Customer Support
If you send us an inquiry through our online contact form, any details you provide (such as your name and email address) will be used solely to answer your questions and assist with support. We will never sell, share, or disclose your information to any third party.
6. Contact Information
For any questions or privacy inquiries regarding CardPorter, please visit our online contact form: